Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
File: Grj4--pJuvWfzsIuSKn-IVfYZIM.mft (raw, json)
Hash identifier: lH0Mij3c4bJA0IdVIcEi2kQPFL4hn5e48fP/H0R0+B8=
Subject key identifier: 81:2C:7E:E1:B0:31:07:7D:AE:62:9D:C9:A5:46:6D:2F:ED:1F:7C:2C
Authority key identifier: 1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
Certificate issuer: /CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Certificate serial: 0198289182C382F95E060C4891C58F8643F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
Manifest number: 05A5
Signing time: Sun 20 Jul 2025 16:01:21 +0000
Manifest this update: Sun 20 Jul 2025 16:01:21 +0000
Manifest next update: Mon 21 Jul 2025 16:01:21 +0000
Files and hashes: 1: Grj4--pJuvWfzsIuSKn-IVfYZIM.crl (hash: IFDMciqdr9wOKwRS7bI1ROMoIATajk8lu2PzQr+MW5I=)
2: WZpaBRHbJvV3APgauuka7IhrTjY.roa (hash: N7PJ6tT8+NoaNwurVN1hCRFlu22DLnLYMpbiTBoA0mg=)
3: ujiBo0ZMn8HZHk6XiAtUjj27oBw.roa (hash: 6pwZz0N+RWGCnPxCzoJegCbH7w0PemUKcz6iq2EQKR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:91:82:c3:82:f9:5e:06:0c:48:91:c5:8f:86:43:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Validity
Not Before: Jul 20 16:01:21 2025 GMT
Not After : Jul 21 16:01:21 2025 GMT
Subject: CN=812c7ee1b031077dae629dc9a5466d2fed1f7c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:02:13:f5:aa:0c:6c:bb:7e:3a:e7:2d:b4:d9:
73:60:e0:5b:8c:86:2a:8e:19:43:4e:f1:13:9c:71:
41:19:8b:88:e3:8f:45:6f:92:d2:0f:08:ac:7c:f5:
99:4d:50:dd:be:69:1c:db:74:96:a4:c0:31:d7:9b:
28:04:cc:25:3d:29:db:5c:19:81:b0:c8:b2:fb:85:
91:dc:f4:91:f4:94:5d:8b:5b:8b:f9:63:d4:a8:d1:
b4:30:96:78:eb:b7:3c:71:13:57:72:c1:b9:f2:1c:
2a:79:5a:75:f0:40:12:07:5d:e4:63:45:9d:33:48:
b4:33:81:bc:4c:d7:55:a9:c8:b3:40:1b:46:9c:ad:
2c:9f:cc:5b:c1:ed:2b:18:71:ef:d1:38:29:9a:c2:
f5:c6:c6:17:6e:d5:d5:51:42:a3:2d:01:d1:01:60:
0f:49:71:9e:0a:47:18:7a:15:35:12:f1:bb:ba:df:
3e:23:02:d9:6a:c7:5e:e4:0c:09:d1:eb:2f:be:55:
62:51:cb:de:65:81:0f:fb:db:c7:e4:c6:ca:2e:9f:
7b:3f:d0:a5:5d:0f:a4:f1:3f:a8:d9:3e:3a:8c:a8:
b0:7b:61:ec:71:a0:40:40:11:a1:bd:b5:0a:28:39:
4f:6d:82:63:f4:bb:8c:f8:3a:fb:04:32:04:95:06:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2C:7E:E1:B0:31:07:7D:AE:62:9D:C9:A5:46:6D:2F:ED:1F:7C:2C
X509v3 Authority Key Identifier:
keyid:1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cb:d1:14:30:1d:c9:aa:cf:31:f8:01:2b:6e:79:d1:56:10:
15:47:ad:7f:c0:2c:b2:c2:69:a7:f2:22:95:53:9e:37:71:19:
72:92:04:61:e3:16:3f:bc:27:5f:65:50:c7:b2:de:54:87:c6:
fe:1d:cd:29:d1:7f:8f:20:a6:4d:86:af:5c:36:a8:23:a4:19:
af:f2:87:22:0c:86:aa:c4:3a:cb:e2:67:e3:d6:c3:dd:dc:79:
a9:5d:ec:0a:68:3b:a2:f5:d8:29:f2:88:6c:cb:ec:16:d4:6f:
38:df:b0:11:79:6d:92:13:5f:c4:09:54:74:b4:e8:bc:10:fb:
9e:a4:53:a1:8e:d1:64:f4:91:a9:4e:35:ef:03:62:d0:0f:ce:
9b:e0:a0:fb:2c:81:fd:56:aa:bd:65:9a:34:f8:19:7c:64:ba:
be:b9:72:1d:07:d8:69:44:7a:d8:55:c7:00:3a:ec:60:fb:af:
b5:21:f0:84:d9:fd:25:bc:a0:fb:7f:5d:ce:b0:e4:5f:70:55:
03:f8:15:45:69:89:aa:95:a2:68:58:26:98:9c:cb:bb:e9:44:
e2:e5:3b:35:b4:2a:df:02:9c:d3:57:73:4f:89:4e:aa:af:1d:
05:1c:b3:a5:f7:30:47:69:5e:31:ee:87:39:e8:5f:d5:f2:2a:
c2:f3:f0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:27:19 2025 by rpki-client